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REMARKS 

Reconsideration of the application is respectfully requested for the following reasons: 

1. Amendments to Claims 

Claim 1 has been amended to include the limitations of claim 7, indicated as allowable 
in item 22 on page 7 of the final Office Action. 

Claims 8 and 9 have been amended to depend from claim 1 rather than from canceled 
claim 7. 

Claim 1 9 has been amended to include the limitations of original claims 1 1 and 18. claim 
19 having been indicated as allowable in item 22 on page 7 of the Official Action. 

Claims 21 and 22 correspond to original claims 8 and 9, but depend from indepu-ndent 
claim 10 rather than from claim 1. 

2. TjtH^.tion ofClaiins 1-4. 6. 11- fl«d 13-17UD HPTrs TTSC 6l02n>^ inview of LLa, £atent 
Mn. rt.902.202 rVein 

This rejection has been rendered moot by the addition to claim 1 of the limitations of 
claim 7, and by the addition to claim 19 of the limitations of claims 1 1 and 18. 

3. Rpi^<>tion of Claims 5 and 17 TTnder 35 U Sr &10%(r\ in view of U.S. PateirtNos, 
ft 092.202 (Vein nnrt S 6S9.616 (Sudia^ 

This rejection has also been rendered moot by the addition to claim 1 of the limitations 
of claim 7, and by the addition to claim 19 of the limitations of claims 11 and 18. 
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4 Ji.. \.cii^n of ClaiTT TTnrter 35 U ^r i^in-^fa-> in vie^v of TT S Patent Nq, 6,09:>^ 
fVoin anH "Wher 4 Password Ti Not A Pd.swnrd" fWeiss) 

This rejection is respectfully traversed on the gromwis that the Veil patent and Weiss 
article, whether considered individually or in any reasonable combination, fail to disclose or 
suggest protection of the smartcaid by multiple PiNs that must be combined in order to access 
the smartcard. Instead, Veil discloses protection of a smartcard by a single PIN. while Weiss 
discloses use of a chailenge-response PIN and a challenge code to access a smaitcai.1. The 
challenge code of Weiss is not combined with a challenge-response PIN. and therefore Weiss 
does not disclose or suggest the claimed multiple PINs. 

It is noted that claim 10 has been amended to include a limitation originally included in 
allowable claim 8, namely the combination of multiple input PINs to form a combined P IN that 
is compared with the PIN stored on the smartcard. However, claim 1 0 does not include a 1 1 of the 
limitations of original claim 8. and inparticular excludes the limitations that the card stores an 
authentication level, that the combination is by means of a logical exclusive OR. that the key is 
a private key, and that the smartcard performs all operations involving the key. Nevertheless, it 
is beUeved that amended claim 10 is patentable because the Weiss patent does not disclose or 
suggest PIN protection using multiple PINs that are combined by the file signing tool before 
comparison widi the stored PIN. 

As pointed out in the previous response, the Weiss article discusses the use of security 
tokens and chanengeresponsescriptsto5«p;./e«e«^conventionalsinglePINsorpasswo. ds^ 
as the ones thatVeUreUes upon to protect private keys retrievedbythe file signing tooKsecurity 

co-processor 122), rather than multiple PINs. There is no suggestion in the Weiss publication 
ofmultiplePn^sthatmustbecombinedtoaccessasmartcard,asspecificallyrecitedinclaimlO. 

To the contrary, in Weiss, a single PIN stored on the token is used to protect the token. The 
challenge-response protocol cited by the Examiner is not equivalent to the PIN. but rather is 
carried out by the controller of the tenninal with which the token is to be used. As explained in 
the paragraph bridging pages 107-108 of the Weiss publication, entry of a singlg correct PIN 
provides access to a device. The challenge response routine does not even begin until after 
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verification of the PIN. and involves encryption of the user's response by the token the 
smartcard), access to the encryption device having been granted upon entry of the PIN. The 
chaUenge-response routine verifies the token, rather than protecting access to the t..ken. 
Thus, neither the password nor the chaUenge-response disclosed by Weiss can be considered 
equivalent to multiple smaitcard-protecting PiNs. as claimed. 

Since the VeilpatcntandWeisspublication do notdisclosethemultiplePINsof amended 
claimlO,withdrawaloftherejectionofclaimlOmider35USC§103(a)isrespectfunyreq.ested. 

Having thus overcome each of the rejections made in the Official Action, withdn.wal of 
the rejections and expedited passage of the application to issue is requested- 

RespectfiiUy submitted, 
BACON & THOMAS, PLLC 




By. BENJAMIN E. URCIA 
Registration No. 33,805 



Date: Septemba: 12, 2005 

BACON & THOMAS, PLLC 
625 Slaters Lane, 4th Floor 
Alexandria, Virginia 22314 

Telephone: (703)683-0500 
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